RAK ID Privacy Notice
Last updated: April 22, 2024
The RAK ID single sign-on solution (“RAK ID”) is operated by RAKwireless Technology Limited (“we”, “our”, “us”). With respect to the personal data collected within the RAK ID we act as a data controller.
You should read this RAK ID Privacy Notice (the “Notice”) carefully before registering a RAK ID account (the “Account”). This Notice applies only to the Account and does not apply to any other our or our affiliates’ products and services.
Contact Information
RAKwireless Technology Limited
Room 1002, 10/F, Easey Commercial Building, 253-261 Hennessy Road, Wan Chai, Hong Kong, People's Republic of China
Email: [email protected]
Data Protection Officer
Please contact us [email protected] to receive answers to any data protection-related questions. Please note that we may record any communication to preserve the evidence of your request and our response.
Within RAK ID you may create an Account that allows you to sign in certain online products and services whether developed by us or third parties (each, a “Product”). More information regarding RAK ID and Account is available at https://id.rakwireless.com/ (the “Website”).
When you sign in with the Account to a certain Product, the personal data contained in your Account is transferred to the respective Product. If the Product is operated by a third party, we would no longer be in control of such personal data. Accordingly, we would not be able to change, erase, or transfer such data by ourselves. The operator of a Product is deemed an independent controller of the personal data contained in the Account. Therefore, we encourage you to review respective Product’s privacy notice/policy/statement in order to understand how your personal data will be processed within such a Product.
Personal Data We Process
We may collect and process two types of your personal information:
- Registration Data: when you register an Account.
- Contact Data: when you contact our support team or us via contact details provided herein or on the Website.
A. Registration Data:
| Data item | Necessity | Purpose | Legal grounds |
| E-mail address | Mandatory | To create an Account and identify you as a RAK ID user | Performance of a contract with you |
| Password | Mandatory | Security of your Account, verification of authority to use the Account | Performance of a contract with you |
| Name | Optional | To identify you as a RAK ID user | Legitimate interest to improve user experience |
| Phone number | Optional | Improve your user experience so that other users of the Products may reach you via the indicated phone number | Legitimate interest to provide users with wider functionality |
| Country | Optional | Improve your user experience so that other users may know in which country you are located | Legitimate interest to provide users with the better services |
| Language | Optional | Improve your user experience so that the user interface will suit your preferences. English language is set by default, however you are able to change it | Legitimate interest to provide users with the better services |
| Time zone | Optional | Improve your user experience to allow other users to reach you within preferred time. The time zone is set by default, however you are able to change your preferences | Legitimate interest to provide users with the better services |
| Photo | Optional | Improve your user experience by making a personalised Account | Legitimate interest to provide users with the better services |
B. Contact Data:
Within the Website you may be able send a request to our support team. You may also contact us via the contact details indicated in this Notice or on the Website. When you contact us or submit a request, you may provide us with certain additional information. Such information may include your other email address or any other personal information that you choose to provide to us. This data is necessary to address your issue, answer your request, contact you back, or address you properly, where and as applicable depending on the type of personal information. The legal basis for processing such a data — our legitimate interest to assist you with using the Account or Products.
Storage Period
The following table describes the storage period for each personal data item separately, and the data is stored in Frankfurt, Europe.
| Data item | Storage period |
| E-mail address | Until the Account is terminated upon your request |
| Name | Until the Account is terminated upon your request |
| Password | Until the Account is terminated upon your request or until you delete such data item within the Account |
| Phone number | Until the Account is terminated upon your request or until you delete such data item within the Account |
| Country | Until the Account is terminated upon your request or until you delete such data item within the Account |
| Language | Until the Account is terminated upon your request or until you change such data item to the default version |
| Time zone | Until the Account is terminated upon your request or until you change such data item to the default version |
| Photo | Until the Account is terminated upon your request or until you delete such data item within the Account |
| Contact Data | For one year following your contact with us or request |
In particular cases we may also process your personal data longer than described above if it is required under the applicable law. We may also delete your personal data if it is required under the applicable law.
We do not sell or rent out your personal data. However, we may share your personal data if it is reasonably necessary for the performance of our undertakings with you and our legitimate interest to maintain and develop RAK ID. In particular, your personal information is shared with the following categories of recipients:
- operators of the Products if you choose to connect your Account to the Products;
- our affiliates, if necessary due to our corporate structure;
- our subcontractors and team members, e.g., support team, technical team, etc.;
- third-party solutions used within RAK ID, e.g., Amazon Web Services that provide us with the data storage facilities that are physically located in Germany;
- government institutions that may request access to your personal data.
Please note that we and the aforementioned recipients are located in jurisdictions which may not ensure the same level of data protection as the country of your residence. We will endeavor to protect your personal data while it is processed, stored, or transferred. If and to the extent we are subject to the European Union General Data Protection Regulation, when we transfer personal data to a country that does not ensure the same level of data protection as the country of your residence, we will use additional safeguards, namely, Standard Contractual Clauses.
According to the applicable data protection legislation you may have the following data protection rights:
a. right to access:
You are able to request access to your personal data that we store about you. Among other you may ask us regarding:
- the purposes for collecting personal information about you;
- categories of personal information concerned;
- who receives your personal information or categories of such recipients;
- how long we are going to store the information about you and if not possible criteria to determine the storage period;
- the right to lodge a complaint with a supervisory authority;
- when your personal information was obtained not from you directly, the source where it came from;
- the existence of either profiling activities or automated decision making based on your personal information. Where such activities are performed, we should also inform you about importance, and expected consequences of them;
- copy of your personal information processed. For such requests further we may charge you with a reasonable fee.
Please note that you may access the personal data related to your Account within the Website. You may also download your personal data stored by us by using respective functionality available within the Website.
b. right to rectification:
You have the right to correct inaccurate (for example, old or incorrect) personal information related to you. Please note that you may personally correct certain personal information within the web-interface of the Website.
c. right to erasure or the right to be forgotten:
You have, under certain circumstances, the right to request erasure of your personal information. Please note, that this right only applies to the data available at the time of request and is not applicable for the future data.
Request to erasure of personal information is possible when:
- personal information is no longer needed for the purposes it was primarily collected or processed;
- when you have already withdrawn your consent for processing your personal data, and we do not have other legal ground to process it;
- when your personal data is processed under legitimate interest and you object to such legal ground. Moreover, there is no overriding legitimate interest to proceed processing of your personal data;
- your personal information was unlawfully processed;
- when your personal data has to be erased due to legal obligation.
Please note that you may delete your Account at any time using the respective functionality available within the Website.
d. right to restrict processing:
You may request us to stop processing your personal information when:
- you have reasonable doubts that your information is accurate, and we are verifying the accuracy of such information;
- your personal information was unlawfully processed;
- the purpose of your personal information collection no longer exists, but you wish to store it longer to defend a legal claim.
Moreover, you may request us to stop processing your personal data while we are working on a rectification request or request to object processing of your personal information.
e. right to data portability:
You have the right to obtain from us and further reuse your personal data for your own purposes within other services. You will also be able to transfer your personal information from one IT environment to another in a safe and secure way, when certain conditions apply, such as:
- processing is based on your consent or needed for the contract performance;
- the processing is made only electronically, without any paper-based files included.
Please note that you may independently download your personal data that we store about you by using respective functionality within the Website.
f. right to object:
You have the right to object processing of your personal information at any time. This allows you to stop or prevent us from processing your personal information. This right is absolute, but applies when one of the following conditions are met, including:
- your personal information is used for direct marketing purposes;
- the processing is based on our legitimate interest;
- we are performing tasks carried out for the public interest or by governmental authority;
- your personal information was processed for either research or statistical purposes.
Please note that you may unsubscribe from receiving marketing notifications at any time by clicking the relevant unsubscribe button at the bottom of marketing notifications or by contacting us at the contact information provided above.
g. right not to be subject to automated decision making and profiling:
Currently, we do not use your personal data for profiling or decisions made solely by automated means.
h. right to lodge a complaint with a supervisory authority:
You have a right to lodge a complaint with a data protection authority in a country you either reside, permanently live, work or in a country where data protection infringement takes place.
